Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a373030343a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a373030343a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          DEksu5OX9Cn/wsAnita8dBY1FadFzWAVfd/8h2Uw/OU=
Subject key identifier:   3C:FD:35:22:B0:8E:CE:B3:F2:EB:35:A6:28:56:FD:6D:94:82:D5:F6
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       6C45A1EC06D0FA438CF4991E1D64205957D341B7
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a373030343a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:07 +0000
ROA not before:           Thu 04 Apr 2024 11:29:07 +0000
ROA not after:            Thu 03 Apr 2025 11:34:07 +0000
asID:                     264422
IP address blocks:        2804:1e58:7004::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:45:a1:ec:06:d0:fa:43:8c:f4:99:1e:1d:64:20:59:57:d3:41:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:07 2024 GMT
            Not After : Apr  3 11:34:07 2025 GMT
        Subject: CN=3CFD3522B08ECEB3F2EB35A62856FD6D9482D5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:79:39:bb:3f:c5:0e:e3:f7:f0:0b:b4:dc:6c:
                    7d:33:1e:db:a0:35:a7:7a:60:ba:39:00:a1:9c:8c:
                    b4:12:fe:58:64:8d:e8:dc:53:8f:ad:ec:87:21:1d:
                    4b:67:3e:ba:1f:62:f1:04:c5:48:80:2b:ad:53:ec:
                    2d:23:0d:8e:b2:eb:91:aa:ed:4b:12:82:77:69:b5:
                    12:ed:61:7b:94:91:d2:8a:1f:8e:b1:24:61:e3:c3:
                    ca:f1:0d:95:1c:60:85:1d:ac:92:ae:a1:ad:12:2a:
                    4a:b3:14:3f:25:0f:e5:25:8c:0d:6e:03:a5:19:17:
                    05:ed:bf:57:42:9a:03:a1:71:db:dd:a8:ea:4c:c2:
                    dc:5a:6b:da:03:00:af:89:3d:c3:1b:a6:8d:28:0e:
                    8d:30:ea:a8:09:c0:b3:ae:8a:a5:fc:0f:01:9d:27:
                    be:85:0e:20:66:09:1f:c0:e5:43:c1:63:e8:b4:e9:
                    9d:35:22:d2:5d:4f:19:a9:14:82:be:cd:27:78:d4:
                    69:31:87:0b:0b:3c:60:04:43:8b:fb:b1:b4:6f:42:
                    33:45:58:4b:61:46:d8:09:98:ab:16:d7:18:5a:f4:
                    01:23:0f:11:32:f2:00:cd:f1:22:6e:c2:43:4f:22:
                    37:1c:bc:52:ae:ea:3a:2b:97:33:05:87:57:7d:08:
                    88:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FD:35:22:B0:8E:CE:B3:F2:EB:35:A6:28:56:FD:6D:94:82:D5:F6
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a373030343a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:7004::/46

    Signature Algorithm: sha256WithRSAEncryption
         74:75:18:c2:fa:aa:fd:ab:32:ae:6e:f3:5d:71:6c:6c:55:28:
         5f:2d:8b:f0:73:35:fb:dd:7b:12:10:dc:ca:41:f3:18:89:ae:
         81:9e:4f:36:bf:04:5b:d7:3e:ea:9c:29:16:7d:67:83:9e:b4:
         63:cc:dd:d6:03:98:f0:0b:2f:dd:b3:ae:73:3c:30:19:16:70:
         9b:9d:eb:43:c6:ae:90:fd:9a:d6:8c:cd:b3:9f:56:e9:39:5b:
         f4:63:95:20:82:4d:b1:3f:c3:f2:71:f8:9b:1d:c7:46:b2:9f:
         14:c5:68:13:50:fc:23:f3:d0:f2:3c:c7:73:ac:83:e8:af:77:
         c6:f9:83:4e:9d:2a:71:f2:19:bc:14:86:f7:2f:5b:2c:73:31:
         b6:28:86:57:42:a1:f1:98:c3:cb:14:62:ab:fd:e2:c3:94:dd:
         c7:09:bb:27:37:92:8c:4a:cb:cb:40:5e:5f:25:4e:0e:76:9d:
         5f:11:9c:57:7e:b8:81:01:d5:43:f7:e5:3e:1c:b6:a2:c5:7f:
         90:f0:da:68:04:18:1d:ae:89:da:93:59:a2:a6:2b:25:a6:b4:
         34:35:69:32:81:f2:e3:00:30:94:d2:cf:0c:ce:b4:e0:a7:b8:
         26:b4:42:4d:c7:4a:61:cc:f2:3a:8a:ad:cc:08:0e:b6:96:59:
         b2:f5:08:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----